CVE-2024-55023

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow attackers to access sensitive information.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:weintek:easyweb:2.1.53:*:*:*:*:*:*:*
cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt-3072xh2:-:*:*:*:*:*:*:*

History

09 Mar 2026, 18:16

Type Values Removed Values Added
References () https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de - () https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de - Third Party Advisory
References () https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 - () https://plain-trick-71d.notion.site/weintek-cMT-3072XH2-14687a89c4c181eeb21ad61e0392f34b?pvs=4 - Third Party Advisory
CPE cpe:2.3:o:weintek:cmt-3072xh2_firmware:20231011:*:*:*:*:*:*:*
cpe:2.3:a:weintek:easyweb:2.1.53:*:*:*:*:*:*:*
cpe:2.3:h:weintek:cmt-3072xh2:-:*:*:*:*:*:*:*
First Time Weintek cmt-3072xh2 Firmware
Weintek
Weintek cmt-3072xh2
Weintek easyweb

03 Mar 2026, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-03 20:16

Updated : 2026-03-09 18:16


NVD link : CVE-2024-55023

Mitre link : CVE-2024-55023

CVE.ORG link : CVE-2024-55023


JSON object : View

Products Affected

weintek

  • cmt-3072xh2
  • cmt-3072xh2_firmware
  • easyweb
CWE
CWE-798

Use of Hard-coded Credentials